Masibhale (isiphathamandla esilawulwa umphakathi esingenzi nzuzo esihlinzeka ngezitifiketi zamahhala kubo bonke) umemezele ushintsho olulandelayo lokukhiqiza amasiginesha usebenzisa isitifiketi sakho sezimpande kuphela, ngaphandle kokusebenzisa isitifiketi esisayinwe ngokugunyazwa yisiphathimandla sesitifiketi se-IdenTrust.
Isitifiketi sempande esithi Asibethele iyahambisana nazo zonke iziphequluli zesimanje, kepha yaziwa kuphela nge-Android 7.1.1, ekhishwe ngasekupheleni kuka-2016.
Inkinga ukuthi, ngokwezibalo ezitholakalayo, yi-66,2% kuphela yamadivayisi we-Android asebenzisa i-Android 7.1 nezinguqulo ezintsha.
Ngakho-ke, ama-33,8% wamadivayisi we-Android asetshenziswayo awanayo idatha kusitifiketi sempande esithi Asibethele futhi uma isitifiketi esisayiniwe sesiphelile, kuzoboniswa iphutha lapho kuzanywa ukuvula amasayithi kusetshenziswa izitifiketi ze-Let Encrypt kulawo madivayisi. .
Amaphesenti wabasebenzisi be-Android abangasamukeli isitifiketi sempande esithi As Encrypt alinganiselwa ukuthi angaba ngu-1% kuye ku-5% wezethameli zamasayithi amakhulu.
I-Let Encrypt ayihlose ukuphothula isivumelwano esisha sokusayina, ngoba lokhu kubeka umthwalo omkhulu ngokwengeziwe kumaqembu esivumelwaneni, kubaphuca inkululeko futhi kubopha izandla zabo ekuhambisaneni nazo zonke izinqubo nemithetho yesinye isiphathimandla esiqinisekisayo.
Ngaphandle kwalokho, futhil Inkinga ngokubuyekeza amadivayisi we-Android amadala Ngeke kususwe futhi isivumelwano sesiphambano kuzofanela senziwe kabusha kaninginingi.
Kusukela ngoJanuwari 11, 2021, kuzokwenziwa izinguquko ku-Let Encrypt API futhi ngokuzenzakalela, amakhasimende e-ACME azothola izitifiketi ze-ISRG Root X1 ngaphandle kokusayina.
Abasebenzisi abakhathazekile ngokuhambisana bazoba nethuba lokucela esinye isitifiketi, esigunyazwe besebenzisa uhlelo oludala lokuqinisekisa ukuwela, kepha izitifiketi ezinjalo zizoqhubeka nokukhawulelwa ngesikhathi sokusebenza kwesitifiketi sezimpande esisayiniwe (Septhemba 1, 2021).
Njengesixazululo, Abasebenzisi bamadivayisi amadala be-Android bayelulekwa ukuthi bashintshele kusiphequluli seFirefox, enesitolo sesitifiketi saso sezimpande esibuyekeziwe.
Kepha iFirefox ayisekeli i-Android 4.x (cishe amaphesenti ama-2 wamadivayisi we-Android asebenzayo) futhi isebenza kuphela ku-Android 5.0 noma entsha.
Abanikazi besiza abangafuni ukwamukela ukulahleka kokuhambisana nezingcingo ezindala ze-Android bayelulekwa ukuthi bacubungule izicelo ezivela kumadivayisi amadala we-Android nge-HTTP noma bashintshele ku-CA ehambisana nezinguqulo ezindala ze-Android.
Nakhu ukuthi i-Let Encrypt imemezele kanjani:
"Isitifiketi sezimpande se-DST Root X3 esethemba ukusivula sizophelelwa yisikhathi ngoSepthemba 1, 2021. Ngenhlanhla, sikulungele ukusukuma sithembele kuphela kwisitifiketi sethu sezimpande."
Kodwa-ke, lolu shintsho oluphelele kusitifiketi se-Let Encrypt uqobo ngeke lube nemiphumela.
“Isoftware engazange ibuyekezwe kusukela ngo-2016 (lapho impande yethu yamukelwa yizinhlelo eziningi zezimpande) namanje ayisethembi isitifiketi sethu sezimpande, i-ISRG Root X1,” kuchaza uJacob Hoffman-Andrews (unjiniyela omkhulu kwa-As Encrypt kanye nochwepheshe omkhulu kwa- Electronic Frontier Foundation) esazisweni.
“Lokhu kufaka phakathi izinhlobo ezithile ze-Android ngaphambi kwenguqulo 7.1.1. Lokhu kusho ukuthi lezi zinguqulo ezindala ze-Android ngeke zisazethemba izitifiketi ezikhishwe yi-Let Encrypt ”.
“Esipheqululini esakhelwe ngaphakathi efonini ye-Android, uhlu lwezitifiketi ezithembekile zezimpande luvela ohlelweni lokusebenza, olungasasebenzi kulezi zingcingo ezindala. Kodwa-ke, iFirefox okwamanje ihlukile phakathi kweziphequluli: iza nohlu lwayo lwezitifiketi zempande ezethembekile. Ngakho-ke noma ngubani ofaka inguqulo yakamuva yeFirefox uyazuza ohlwini olusesikhathini samanje lweziphathimandla zezitifiketi ezethembekile, noma ngabe uhlelo lwabo lokusebenza luphelelwe yisikhathi, ”ngokusho kukaHoffman-Andrews.
Isaziso siphinde siqondiswe kwabanye abanikazi bewebhusayithi abathola izikhalazo ezivela kubasebenzisi ukuze bakwazi ukulungiselela ushintsho. I-Let Encrypt ibakhuthaza ukuthi basebenzise isixazululo sesikhashana (shintshela kolunye uchungechunge lwesitifiketi) ukugcina isayithi labo lisebenza futhi behlola lokho abakudingayo ukuthola isisombululo sesikhathi eside.
Umthombo: https://letsencrypt.org